Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/CeLnqu3xYBKZUvCPgV7J-PpEdRM.roa
File: CeLnqu3xYBKZUvCPgV7J-PpEdRM.roa (raw, json)
Hash identifier: zLuEq1mLrHs0mVf6yNVLD5Zej/7XVgYiGrCvNOWJeVo=
Subject key identifier: 09:E2:E7:AA:ED:F1:60:12:99:52:F0:8F:81:5E:C9:F8:FA:44:75:13
Certificate issuer: /CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
Certificate serial: 019423D75D6C0B58EC300481BF1A293A70DA
Authority key identifier: B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/CeLnqu3xYBKZUvCPgV7J-PpEdRM.roa
Signing time: Wed 01 Jan 2025 21:48:24 +0000
ROA not before: Wed 01 Jan 2025 21:48:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 24679
IP address blocks: 5.1.68.0/24 maxlen: 24
5.1.69.0/24 maxlen: 24
5.1.83.0/24 maxlen: 24
5.1.88.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.mft
rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:5d:6c:0b:58:ec:30:04:81:bf:1a:29:3a:70:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
Validity
Not Before: Jan 1 21:48:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=09e2e7aaedf160129952f08f815ec9f8fa447513
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:65:56:63:30:f8:40:3c:52:39:85:8f:9e:0e:
1a:17:a3:75:0d:02:27:95:fd:90:e7:e4:4d:a6:93:
5b:c4:80:bb:94:84:58:c6:be:c6:a0:b1:8e:dd:12:
4d:b4:b0:fb:73:0b:96:9a:5c:9b:84:7d:19:90:7c:
4b:f3:46:f1:f9:67:e6:c7:95:46:2a:42:4a:88:51:
94:7e:be:8f:b9:98:75:fd:f2:71:01:2e:ad:cc:12:
1e:12:b5:37:ff:75:9f:29:e6:09:5b:f6:e0:d3:9d:
95:9e:e1:ba:5e:a7:65:1e:75:4b:65:9f:bb:a1:e7:
1e:a4:51:56:7e:a4:71:ae:76:7e:e8:12:44:5c:8e:
80:b7:09:7d:55:11:77:30:a1:73:7e:5b:73:e4:0c:
e5:ec:0a:76:58:7e:42:47:73:11:ac:d9:51:03:5b:
a3:d7:ca:5f:81:c1:82:42:6e:3a:d8:dc:5a:cc:a1:
f4:14:b8:51:a9:a0:c9:3a:54:9c:87:43:b9:8f:02:
b3:9c:96:e0:01:4e:23:d8:e7:98:58:fa:cb:50:ae:
24:ae:ef:4d:5f:45:39:24:8f:71:eb:bc:57:1a:92:
e8:c6:96:0b:67:62:04:11:2c:d5:92:55:7b:b5:05:
7d:fa:9c:59:c2:73:86:86:f0:42:e3:ce:b5:a8:d5:
37:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:E2:E7:AA:ED:F1:60:12:99:52:F0:8F:81:5E:C9:F8:FA:44:75:13
X509v3 Authority Key Identifier:
keyid:B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/CeLnqu3xYBKZUvCPgV7J-PpEdRM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.1.68.0/23
5.1.83.0/24
5.1.88.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:dc:48:07:73:5a:14:bf:a9:35:19:2c:12:c6:10:b5:ee:07:
92:fa:c5:cf:b7:f7:99:9b:a0:13:9d:0c:a0:3b:13:de:dd:9c:
25:18:12:b6:fb:bd:1e:a1:4b:ad:6b:6b:ed:a4:ee:02:41:78:
47:8e:45:4a:eb:b4:c6:b3:85:dd:cf:1a:3d:6c:3c:72:ab:82:
7e:68:1c:ab:9a:a3:64:ca:09:85:37:54:ee:59:3a:06:cb:01:
90:fa:4a:45:b7:5f:6c:11:84:12:41:f8:67:ae:70:14:e4:ab:
be:e7:bd:44:4b:c4:63:d2:90:ad:fe:ee:80:50:86:34:a9:ef:
27:ef:ef:b9:6f:9c:11:5e:32:ca:c8:8e:22:10:d1:98:8d:52:
02:9b:b7:f1:46:a2:0b:d9:8b:57:1c:4e:9c:e7:0e:45:f1:35:
96:bd:b8:86:e1:9c:d2:17:d9:37:9f:b5:9b:a2:bf:53:7a:47:
94:30:05:bd:87:5f:86:b4:1f:57:93:20:f7:91:c5:68:64:cb:
63:28:b2:00:7d:ee:3a:95:f4:10:23:58:12:52:ef:36:a4:14:
ae:62:cc:46:de:c2:a0:7b:4f:d0:c9:ae:bf:5f:92:7f:ea:ee:
f4:bf:6f:2e:0b:cb:a0:80:1c:61:dc:32:63:bb:d4:97:e1:94:
23:f4:dd:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:03:31 2025 by rpki-client